SAP S/4HANA 108
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:s\/4hana:108:*:*:*:*:*:*:*
part: a version: 108 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | S/4Hana (1db5d00c-feee-5087-9d8e-f62ea0077696) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-0488 |
vulnerable | 2026-06-08 07:47:12.377270 |
Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor)
CRITICAL (9.9)
An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, which includes the ability to execute an arbitrary SQL statement. This leads to a full database compromise with high impact on confidentiality, integrity, and availability.
Published: 2026-02-10T03:01:08.999Z
Updated: 2026-02-26T15:04:14.152Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4138 |
vulnerable | 2026-06-08 06:50:17.092588 |
Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)
MEDIUM (4.3)
Manage Bank Statement ReProcessing Rules does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can enable/disable the sharing rule of other users affecting the integrity of the application. Confidentiality and Availability are not affected.
Published: 2024-05-14T03:53:10.737Z
Updated: 2024-08-01T20:33:52.538Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31589 |
vulnerable | 2026-06-08 05:43:41.121928 |
Details available
Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.
Published: 2022-06-14T18:36:39.000Z
Updated: 2024-08-03T07:19:06.823Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.